Not sure about this Hoffman character. Also the nodeJS/python client/server architecture is bloated - I don't want to run all of this (likely insecure) shit on my machine. Sorry if it's a harsh review.
Have to agree here.
Did anyone do a security review on the application?